EUVD-2025-209168

The login mechanism of Sage DPW 202506004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 202106000. On-premise administrators can toggle this behaviour in newer versions...

PT-2026-29543

The login mechanism of Sage DPW 2025 06 004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021 06 000. On-premise administrators can toggle this behaviour in newer versions...

CVE-2025-67807

The CVE describes an authentication behavior issue in Sage DPW 2025_06_004 where login responses differ for valid vs. invalid usernames, enabling account enumeration on versions prior to 2021_06_000. Affected product: Sage DPW (on-premise deployments); root cause: discriminatory responses during ...